EIP-2026-112637

This is a functional proof-of-concept for a stored XSS vulnerability in Pacer Edition CMS RC 2.1. The exploit crafts a malicious POST request to the password recovery endpoint, injecting JavaScript via the 'email' parameter that triggers when the victim interacts with the page.